top of page

Privacy Notice

 

 

IDENTITY AND CONTACT INFORMATION OF THE DATA CONTROLLER.

​

 

ALCANZA BARRISTERS SAS is the legal data controller responsible for the processing of your personal data for the purposes specified in the section "Purposes and Legal Basis for the Processing of Your Personal Data." The Data Controller is located at Campos Elíseos 169 Int. 202, Colonia Polanco, Mexico City, CP 11560. The contact email is contacto@alcanzabarristers.com.mx and the phone number is 55 7005 5206.

​

 

PURPOSES AND LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA INFORMATION COLLECTED DIRECTLY

 

Alcanza Barristers SAS or any of its affiliates may collect information about you through any of our digital platforms under the domain @alcanzabarristers.com.mx, this website, or the applications (APIs) present on it.

The primary personal data collected will be:

  • Full name

  • Email address

  • Gender

  • Age

  • Education level

  • Profession

  • Job title

  • Time at the company

  • IP address

To carry out our business objectives, when you are a supplier or client, we will also require:

  • Identification Data: Full name, handwritten signature, Federal Taxpayers' Registry (RFC), Unique Population Registry Key (CURP).

  • Contact Data: Home and/or work address, email address, landline and/or mobile phone number.

  • Employment Data: Job title or position, work address, institutional email, institutional phone number.

  • Financial or Patrimonial Data: Tax information, bank accounts for service payments.

  • Sensitive Data: All information related to the answers you provide in the psychosocial risk evaluations mandated by NOM-035-STPS-2018. This is always subject to a signed contract and the provision of this Privacy Notice.

 

PRIMARY PURPOSES OF DATA COLLECTION.

​

 

Legal obligation derived from:

  • Due Control of the Organization

  • Prevention of Crimes inside and outside the Organization

  • Prevention of Unethical Conduct

  • Crime Reporting

  • Reporting of incidents related to violations of internal organizational policies

  • Training

  • Guidance

  • To identify and contact you for the provision of our compliance and personal data protection consulting services.

  • To prepare, manage, and follow up on service proposals you request.

  • To administer and operate the services you contract with us, including the creation of diagnostics, policies, procedures, and other required legal documentation.

  • To carry out billing and collection processes for services rendered.

  • To comply with legal obligations and requirements from competent authorities.

  • To maintain effective communication regarding the status and progress of contracted services.

 

ANONYMIZATION OR DE-IDENTIFICATION.

 

For the purposes of the public documents required by NOM-035-STPS-2018 and NOM-037-STPS-2022, data will be anonymized. For the purposes of a complaint investigation, your data will remain confidential to the extent possible, unless required by an authority, or if your data could be linked to the possible commission of a crime. We may also collect the following secondary data when you provide it:

  • Any information related to what you provide in our forms, such as full name and email address.

  • Any information voluntarily provided by you on our artificial intelligence platforms.

  • In some cases, your IP address to generate statistical data as described in the third-party analytics section.

 

SECONDARY PURPOSES OF DATA COLLECTION.

 

Additionally, we will use your personal information for the following purposes which are not necessary for the service requested but which allow us to provide you with better service (secondary purposes):

  • To send newsletters with relevant updates and news on compliance, data protection, and cybersecurity.

  • To invite you to participate in events, seminars, or courses organized by our firm.

  • To conduct quality surveys about our services.

 

DATA RETENTION PERIOD.

 

Information related to the primary purposes will be stored for a period of five years, while information related to secondary purposes will be deleted after two years. Retention for both cases may be extended up to 10 years if the information could be considered legally relevant for attributing criminal responsibility in a crime.

 

DATA TRANSFERS

 

Sensitive Data Transfers: In the event that a psychosocial risk is detected in the results, the evaluation results will be shared in accordance with the Psychosocial Risk Prevention Policy. The purpose of this transfer is to comply with the standard so that you can be referred to a health professional; no additional sensitive data will be shared.

We may share your information with the following individuals or legal entities:

  • Third parties, companies, and service providers such as servers, cloud providers, or software technology for the storage of your information, under strict confidentiality and responsibility.

  • Government and authorities when such actions are founded and justified. Labor regulatory authorities to prove compliance with NOM-035-STPS-2018.

  • Authorities related to tax compliance or corporate registrations when such actions are founded and justified. In this case, only anonymized data will be shared with said authorities.

Additionally, we may share your information with third parties in the following circumstances:

  • When we are required by law to provide your information.

  • To protect our integrity and rights. When we deem it necessary to respond to accusations against us, comply with legal processes, or administer our agreements and terms, or for fraud prevention, to reduce regulatory risks, and to protect our rights and property, those of Alcanza Barristers SAS, our clients, or others who could be potentially affected.

However, to fulfill the primary purposes that give rise to the service, we do remit your data to service providers (Processors) who assist us in processing your information. These Processors include:

  • Software and cloud service providers: For the storage and management of information and the provision of our services.

  • Artificial Intelligence models: For process optimization and document analysis, provided that a contract is in place to ensure that the provider acts as a Processor under our instructions and is obligated to maintain the confidentiality and security of the information.

These data remissions, both national and international, are necessary for the provision of the service and do not require your consent. The Processors assume the same data protection obligations as we do and act solely in accordance with our instructions.

In some cases, your information will be used in Applied Artificial Intelligence systems to perform, but not limited to, some of the following: contract drafting, legal audits, internal investigations, data mapping, policy and procedure manual creation, risk assessments, protocol development, and monitoring of obligations derived from compliance policies or a specific regulatory compliance program. In these applications, we may use your information for machine learning processes where your information is at all times anonymous and supervised and monitored by a human.

Should such data be collected, it will be provided to the client who contracted the service. This information will not be commercially traded by Alcanza Barristers S.A.S. The collected information may be used for, but not limited to, the following purposes: statistical reports for the contracted client, convergence analysis, psychosocial problem detection, crime detection, risk mitigation, anti-corruption efforts, prevention of money laundering, prevention of terrorism financing, and regulatory compliance.

Our Representational State Transfer Application Programming Interface (REST API) platforms have compliance protocols that adhere to the data protection policies of the European Union (General Data Protection Regulation) and Mexican legislation.

 

 

DATA STORAGE.

 

Our email servers are located in Mexico in a cloud environment within the Triara Data Centers. This environment does not allow information to be transferred abroad. Our website server is located in Mexico but complies with the requirements of the GDPR and the Federal Law on the Protection of Personal Data Held by Private Parties. In the case of artificial intelligence programs, our tools are with different cloud providers, but their standards comply with the General Data Protection Regulation of the European Union. Our Backup Servers are disconnected from the internet and are stored according to the internal Personal Data Protection Policies of Alcanza Barristers S.A.S., with only one person responsible for their transfer and custody. These will be processed in accordance with this Privacy Notice and following a criterion of data minimization.

 

 

DATA SECURITY.

 

At Alcanza Barristers, we protect information in accordance with our Cybersecurity Policy, using pseudonymization and encryption to protect personal data, in addition to the technical cybersecurity measures described in said policy.

 

 

COOKIES AND SIMILAR TECHNOLOGIES.

 

Our online services use cookies, pixels, log files, web beacons, and other mechanisms to collect information about the use of our sites.

Cookies: Cookies are alphanumeric identifiers that we transfer to your computer's hard drive through your browsers to facilitate your navigation by collecting your information. We use cookies to facilitate access to our page and collect data such as your IP and in some cases your Mac address, solely for the purpose of your access to our page. Most browsers automatically accept cookies, but if you prefer, you can change your browser preferences to block cookies in the future. The help menu of most browsers can assist you in changing your settings regarding this issue, either to delete, change, or disable them. For more information, please visit our Cookie Policy, which is located here.

Gifs, Web Beacons, and Other Technologies:

GIFs are small graphics that allow certain functions similar to cookies to be identified. These elements are also stored on your hard drive and are sometimes invisible in browsers (Web beacons). We will occasionally use GIFs in connection with our services to track user activities on our digital platforms. These elements help us manage content and establish statistical data on the use of our digital services. We and the contracted third parties also use GIFs in our HTML language, emails, to our clients, responses, and they help us with identification, such as when our email is received, forwarded, or replied to.

Log Files:

Most of our browsers collect certain information such as your IP address, device type, screen resolution, operating system, and your browser's installed versions. This data is stored directly in log files.

Third-Party Analytics: The firm uses automated applications such as Google Analytics to evaluate our services. We use these applications to store non-personal user information that will serve to improve our services and user experience. These providers may use cookies and other technologies to perform their services and may combine the information they collect from you for their own purposes. This type of non-personal data in this section will be subject to the privacy policies of those companies. For more information on this topic, you can manage some of these permissions by disabling cookies or by consulting our Cookie Policy.

Do Not Track Signals:1

Our platforms do not respond to "Do Not Track signals." We and certain third-party services may use cookies and similar tracking technologies while providing our services. These technologies are used primarily for stability, security, functionality, performance, and advertising purposes2. The latter will depend on the settings you have in your browser. For more information on this topic, you can manage some of these permissions by disabling cookies or by consulting our Cookie Policy.

Email Tools:

On some occasions, the firm will use external email tools for group distribution. These mailings will only occur when a contract is in place and there is express acceptance from the interested party. The emails will not have a commercial purpose; on the contrary, they will be reminders, notices, instructions, or any other reason for which Alcanza Barristers S.A.S. has been contracted to carry them out, almost always related to compliance topics within a company. These tools will come from the sender contacto@alcanzabarristers.com.mx. Any other sender is not authorized by the firm and will not be recognized.

Marketing:

The firm's business purpose is NOT commerce, so there will be no marketing campaigns.

 

RIGHTS

 

Right to Be Forgotten:

You have the right to be forgotten. You may request this right when you deem it appropriate by sending an email to contacto@alcanzabarristers.com.mx.

ARCO Rights:

You or your legal representative may exercise any of the rights of Access, Rectification, Cancellation, or Opposition (hereinafter "ARCO Rights"), as well as revoke your consent for the processing of your personal data by sending an email to contacto@alcanzabarristers.com.mx. Your request must be made by filling out the form to exercise ARCO Rights and Consent Revocation (hereinafter "Request") which is available here and contains all the elements to address the exercise of your right and/or revocation of consent in accordance with the regulations. For the personal data protection officer of Alcanza Barristers S.A.S. to follow up on your request, you or your legal representative must correctly prove your identity, for which it is necessary to complete all the fields indicated in the Request and attach a copy of one of the official identifications mentioned below:

  • National Electoral Institute credential.

  • Passport.

  • National Military Service card.

  • Professional license.

  • Immigration document that confirms the foreigner's legal stay in the country.

If you believe that your right to the protection of your personal data has been violated by any of our conduct or omissions, or if you presume any violation of the provisions of the Federal Law on the Protection of Personal Data Held by Private Parties, its Regulations, and other applicable regulations, you may file your complaint or report with the Secretariat for Anti-Corruption and Good Governance.

​

Contact:

You can contact us by email at contacto@alcanzabarristers.com.mx, through the "contact us" tab, or any other means described as icons in the upper right-hand corner.

Acceptance:

By contacting us through any means, you accept our privacy notice described above, as well as the way we share your information.

Last updated date: April 30, 2025.

bottom of page